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y2. establishing a document to be signed by the server system; and 

3. providing an input means for a user of the client system to confirm an 
intent to sign the document using an encryption device of the server as 
an acrof signature by the user of the client system; and 

b. under control of the server system, 



1 . providing a means to control access by categories of client users and to 
determine whether^ particular user is authorized to sign; 

2. providing a means to urtauely identify the^locumtent to be signed that 
includes a reference to th\ identifier furnisfi§d^y the client system; and 

3. providing a means to electronically sign a document and its identifier 
using the encryption device of t\e server system at the request of a 
signer, 

whereby the document is electronically signed by a client user without the need for a 
client-side digital certificate or a signature tablet connected to the client user's system. 

21 . The method of claim 20 wherein the unique identifier of thSt document includes a 
sequence of a combination of the client system's computer network location identifier 
together with the current date and time as reported by the server's clock. 

22. The method of claim 20 wherein the method of the server system\o authenticate a user 
requires the client user to supply a biometric identifier to the server\ystem. 

23. The method of claim 20 wherein a means is provided for 



1 . the storage of each unique document identifier in a databaseNat or 
accessible to the server as a record of each signature transactuan; 



2 



Serial Number:09/081 ,872 [Messing] GAU 2767 Amendment A 



2. a query of one or more of a collection of unique document identifiers or 
properties at the server system; and 

3. Viewing of a record containing information about a signer that is 
accessible via the unique document identifier or properties, 

whereby the existence of kunique document identifier can be further established as 
authentic by its presence in\the database. 



24. The method of claim 20 wlgerein a use 




the speaking of a sound. 



25. The method of claim 20 wherein a unique ^ acdment identifier includes an approval for 
a credit card transaction by a credit card payment system. 

26. The method of claim 20 wherein aVlient side signature device is used to resign the 
electronic document as a final act of\signature intent. 



27. The method of claim 20 wherein the client system user is an electronic process or 
agent. 

28. The method of claim 20 wherein the server'sNencryption device consists of a unique 
encryption key, generated from a symmetric cibher using the unique document 
identifier of a document as the character input of\a password for generation of the key, 

whereby each document to be signed is encrypted with a\jnique symmetric key, and 
whereby a cryptotransformation of a document involving thes^pplication of such key 
constitutes its signature. 



29. The method of claim 20 wherein the method of the server systerp to authenticate a user 
requires the client user to demonstrate knowledge of a secret, 
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/hereby a username and passphrase, username and password, or personal 
identification number or other knowledge based system can be used to control 
access by a client user to a server's signature device. 

30. A method of^electronically signing an electronic transaction record, document, filing, 
message, binafv file or other digital information (hereinafter collectively referred to as "a 
document" or "the^ocument"), comprising: 



a' 

anor 



(a) providing a signature^encryption means at a server computer, 

(b) providing a means of identifying a user, 

(c) providing an authentication means of access cofitrol for determined classes of users, 




(d) providing a document template, with\paces to be filled in with character input by a 
client user, 

(e) providing a character input means by whicMhe client user can remotely provide, and 
as appropriate, review and correct a series oKcharacters that are to be inserted at 
spaces within a template, in order to assemble^ document that includes specific 
information furnished by the client user, 

(f) providing a means for establishing a unique identifier W the document to be signed 
which includes an identifier of the client user and the cu\ent date and time of the 
server's system clock, 



(g) providing a means by which said client user remotely causes the encryption device 
to affix an electronic signature to the particular document and identifier that was 
assembled, 
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jereby documents are created and signed by users using one or more templates and 
incryption devices located at a remote server over a computer network, including the 
Internet 

31 . The methobl^of claim 30 wherein the document to be signed includes formatting tags or 
codes, 

whereby the documW can be read by applications that employ such tags or codes after 
completion and signature. 



32. The method of claim 30 wherein the document to I 
text or graphical information t^at is displayed to the 
or deleted by the user, 



includes server-supplied 
client usbr but cannot be modified 



whereby signature by the client userindicates acceptance and agreement to the 
supplied text and graphical information as part of the signed document information. 

33. The method of claim 30 wherein the server's encryption device consists of a unique 
encryption key, generated from a symmetricvcipher using the unique document 
identifier of a document as the character input\pf a password for generation of the key, 

whereby each document to be signed is encrypted wim a unique symmetric key, and 
whereby a cryptotransformation of a document involving\he application of such key 
constitutes its signature. 

34. The method of claim 30 wherein the client user performs Options by the speaking of a 
sound. 



35. The method of claim 30 wherein the signed document is an envelope for the 

transmission and routing of other files, each of which may be included, attached, and/or 
digitally signed using the method of claim 20. 
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86. A server system for signing a transaction record, document, filing, message or other 
\ communication comprising: 
V an authentication component including: 
\ 1 . a data storage medium storing information for a collection of users; 
\2. a receiving component for receiving requests to sign a transaction record, 
qpcument, filing, message or other communication, 

b. an approval component that retrieves from the data storage medium information for 
the indicated signer, compares it with information provided for the current transaction, 
and that approves or denies access by the indicated signer to the signature device of the 
server system; , 

c. a document cteation component that allows a user to enter data in a document 
template as part of the process to generated finalised document for signature, 

d. an identification corW>onent that generates a unique identifier for the document to be 
signed, which includes an identifier of the cljent user anjtfhe current date and time of the 
server's system clock; anck 

f. a signature component consisting of an encryption signature device at the server; 

whereby documents can be generated and signed at a server computer by a client user 
as the client user's own signature without the need for a digital certificate or signature 
tablet at the client user's computing device. 

37. The method of claim 36 wherein any one or more of a collection of authentication 
means is used to control access by signers to tne encryption signature device of the 
server, \ 

whereby biometric identifiers, usernames and passwordsKpassphrases, or personal 
identification numbers, smart cards, or any combination^ them or other methods of 
authentication may be used for signature control purposesv 
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